takshal / freq Goto Github PK

go latest is also not working although im using latest version of go any other way????

Command 'freq' not found, did you mean:
command 'free' from deb procps
Try: sudo apt install

https://twitter.com/ofjaaah/status/1504932805431767046?s=28

I was implementing the method discussed in the above tweet.
echo http://testphp.vulnweb.com | waybackurls | gf xss | uro | qsreplace '"><img src=x onerror=alert(1);>' | freq

This command only outputs the below lines and breaks [perhaps]. Can you test?

frequester tool By tojojo !!
\__(-_-)__/

freq only checks if the string "alert(1)" is reflected in the result, which could lead to a lot of false positives, it would be great if the following block of code

sb := string(body)
   check_result := strings.Contains(sb , "alert(1)")

is changed to match "><img src=x onerror=alert(1)> or any other xss payload that contains < and > in order to avoid false positives.

Thanks

go build freq.go

compile: version "go1.17.6" does not match go tool version "go1.18.2"

thx

Completely new to go

Can you explain how to use this tool with qsreplace.
and how does it work?

change Install link go get -u https://github.com/takshal/freq (this) to go install github.com/takshal/freq@latest
Remove https://

go get -u github.com/takshal/freq
go get: installing executables with 'go get' in module mode is deprecated.
Use 'go install pkg@version' instead.
For more information, see https://golang.org/doc/go-get-install-deprecation
or run 'go help get' or 'go help install'.

package https:/github.com/takshal/freq: https:/github.com/takshal/freq: invalid import path: malformed import path "https:/github.com/takshal/freq": invalid char ':'